EAP-SIM authentication problem at 2nd stage

dear guest, i have problem in eap-sim authentication. I'm using freeradius 2.2.0, blackberry 9220 here my simtripletsdat. file 1510012660372465,AF6876E748BD46bf853A99DC2032F0A7,95762655,449177635B92bc00 1510012660372465,A1A9AC744E8D49819D27A79B067BCA69,257b31c6,64ff9467DEa1e400 1510012660372465,603

Re: Load Balancing

more than one console? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info

Re: Freeradius several segfaults at heavy load and startup ?

On 2012/11/28 11:50 AM, Phil Mayers wrote: root@itop0-db0:/scripts# LD_PRELOAD=/usr/lib/libperl.so.5.10 Why are you fiddling with LD_PRELOAD? On my debian boxes FR cannot run without preload. There is something on the mailing list about it a while back. -- Johan Meiring Cape PC

Re: help - simultaneous accounting

ser. e.g. Set the remaining time left to 1 second. Look at 'acctupdate' in the chillispot config. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape

Re: Volume Limit per user monthly

you might let a user run for about an hour before you disconnect him, but you dont really have another option. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should re

Re: Very huge Acct-Session-Time

Nas stores "start time" internally. 3) NTP on the Nas eventially figures out what the time is. 4) Next time the Nas calculates the Session time, it is 43 years. I must say I am unsure how I would do it differently if I was the Nas software developer. -- Johan Meiring Cape PC S

Re: sqlcounter_expire_on_login module

he return, says this: Modify your query... select ifnull((The rest of your query),0) It will then return 0 when no records are found. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you s

Setting up FreeRADIUS accounting with IP address logging

linux, mac and smartphones but for Windows it seems impossible to find the right combination of settings. I haven't googled this issue so much, so maybe there's a simple answer. Also, it's a later problem. Thankful for a response, Johan P.S. I have attached the radiusd.c

Re: FreeRadius questions

will therefore not work. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html -

Re: Configuring freeradius for MACsec

an-15 -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe/unsubscribe

Re: FreeRadius to authenticate DHCP Requests with Option82

) make this hard. They don't talk to databases. They're firmly stuck in 1980's technology. Another option which we use very successfully is a Mikrotik DHCP server. It can talk to Freeradius. http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server It works well. -- Johan Meiring Cape

Re: rlm_perl and returning > 1 attribute with same name

o will only create 1 avpair by the name 'Filter-Id'. How would I go about returning more than 1 or am I stuck because of perl? I have an array with my Framed-Routes I then do the following: $RAD_REPLY{'Framed-Route'} = \@framedroutearray; -- Johan Meiring Cape PC Servic

Re: Last login time in LDAP?

quot;ldapmodify", called via the "exec" module. Better option might be rlm_perl -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Servic

Re: Segfault in 2.1.10 backports version advice

t had the time to collect debug info. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html -

Re: Radius Client vs. Radius Client-NG

personnally use radiusclient-ng I also use radiusclient-ng. Comes as a standard debian package. Never had an issue. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC

Re: AK Timeout

entication does not arrive (for at least an hour). As Freeradius will not consider the session closed (until it receives an accounting stop). All should be fine. Cheers, Johan On 2011/12/02 01:41 AM, David Peterson wrote: Sigh, I wish I knew. I was hoping it would make sense to some

Re: Change of network adapters in radius server

On 2011/12/02 09:52 AM, Alan DeKok wrote: I've done tests with 50K requests/s for days straight. My smartphone could do 200 requests/s. I must say, freeradius running on a smartphone is quite cool! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886

Re: radiusd goes wrong

On 2011/11/05 01:41 AM, Ivan Matala wrote: freeradius runs if i use this radiusd -x -f pls help http://www.lmgtfy.com/?q=fix+unix+permissions -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Re: IPv6 ready?

th? Do they HAVE to be in directories with the IP address as part of the name? Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer a

Re: Authorising Clients by Calling Station ID Not IP

ADIUS-Client-Virtual-Server = "dynamic_server" } ok } } } Notes: - "dynamic_server" is the spesific virtual server than handles the dynamic clients. - the rlm_raw packet MIGHT contain Calling-Station-Id (or do you mean Called-Station-Id??) as well. You will have

Re: Rewriting wimax calling-station-id with perl

"undefined reference to `lt_preloaded_symbols'" that apparently has even Alan opting to forsake libtool. Which version of debian do you need packages for? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email

Re: Post-auth and Rejected logins

On 2011/09/26 11:38 PM, Alan DeKok wrote: Johan Meiring wrote: If the auhtentication as OK, and my perl module then decides to reject the Authentication (by returning RLM_MODULE_REJECT), Don't do that. The post-auth section is for running modules AFTER the user has been accept

Post-auth and Rejected logins

orce the perl to not run again. Does anyone know of a more elegant way? Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: h

Re: WARNING about auth-type = Local

On 2011/09/21 06:19 PM, Alan DeKok wrote: > Johan Meiring wrote: >> My authorise and authenticate section looks like this. >> >>authorize { >> authorisation_log >> chap >> mschap >> sql > > pap > >>

WARNING about auth-type = Local

- Do I need to concern myself with the warning? All is working fine, I was just enquisitive as to why this happens. Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any a

Re: MySQL performance

authenticating? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe/u

Re: Slow DB / outstanding requests

sts) Had to wait for the middle of the night to reboot (so more ram could be allocated). Server is now perfectly fine. It was just the first time that I didn't see FR "recover" after the DB eventually finished with slow queries. Cheers, -- Johan Meiring Cape PC Services C

Slow DB / outstanding requests

be ignored. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscr

Re: Test

On 2011/09/15 04:49 PM, Alan DeKok wrote: Is the list down, or are people quiet? Suspect they're quiet. Freeradius works too well!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attach

Re: CoA proxying again

add a "coa home server" for the client?? That might be easy to add for 3.0. +1 This would also be a GREAT feature for me. How far is 3.0 off? 2.12 (or 2.13) maybe? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on t

Re: Need help authenticating local users on Apple server

ference to a module /usr/local/etc/raddb/sites-enabled/inner-tunnel[189]: Errors parsing authenticate section. Read again. list it in the "authorize" section not the "authenticate" section -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 ---

Re: General wiki rules

lpful, are there any good tutorials? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.ht

Re: How to setup Freeradius in a Domain

main Controller/LDAP refuses to share the ntPassword attribute with anyone that does not look like Microsoft? Hopefully Samba4 changes that as it should have a copy of the AD database! Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 B

Re: How to setup Freeradius in a Domain

(samba3, NT4 style domain) Can you get this to work if you dont want Windows on your network? (Not something I'm trying to achieve, just curious) -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or openin

Re: Error: User-Name is not the same as MS-CHAP name

On 2011/06/03 02:15 PM, Phil Mayers wrote: I'm not downloading a torrent of copyrighted software to fix someone else's problem. As long as you dont get a key, it is legal. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before

Re: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

On 2011/06/03 10:07 AM, Alan DeKok wrote: Martin wrote: Did this and it is 3.0.0, but on on the official site there is nothing mention regarding 3.0 version. When is going to be official released 3.0? Perhaps this summer. What hemisphere are you in? :-) -- Johan Meiring Cape PC

Re: Wiki - once upon a time there was documentation

On 2011/06/01 12:17 PM, Phil Mayers wrote: ...in which the migration technique was discussed, and help was requested to reformat documents which had not migrated seamlessly. - Is the old wiki accessable anywhere so one can help to manually transfer info? -- Johan Meiring Cape PC Services

Re: New FreeRADIUS wiki - Help appreciated!

On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote: http://power.freeradius.org:4567 is problematic from here (slow, and Some ISP's prioritize 4567 different to 80. Is their any good reason it runs on 4567? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886

Re: Can FreeRadius connect to ACT! database?

be to use a php script (called using rlm_exec) that can query the ACT database directly. Php can query weird and wonderful databases using odbc, and rlm_exec can call any php script. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021

Re: testing which client initiated request ? Client-shortname ... FreeRADIUS-Client-Shortname

is could be exploited for what I want, if only the testing client based on shortname worked ? You could try "dynamic clients" and different virtual servers. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 --

Re: FR 2.1.7 Exits for no reason

I had the same issue. (I _think_ it was 2.1.7) Alan's advice was upgrade, there was some "stuff" fixed. I upgraded to 2.1.9 (which was the current release at the time). It worked. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/s

Re: AW: AW: AW: AW: Authenticating SSH login on a Cisco IOS switch to AD

, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR 2.1.0 (ubuntu) proxying to NPS/IAS.

On 2011/02/02 12:32 AM, hellbird wrote: Thank you for your answer. I have contacted Microsoft to help me. Would be really interesting to know if it works contacting them!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: FR 2.1.0 (ubuntu) proxying to NPS/IAS.

On 2011/02/02 12:32 AM, hellbird wrote: Thank you for your answer. I have contacted Microsoft to help me. Would be really interesting to know if it works contacting them!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: Freeradius SQL: PEAP: Tunneled authentication was rejected.

p3361206.html> Sent from the FreeRadius - User mailing list archive <http://freeradius.1045715.n5.nabble.com/FreeRadius-User-f2740693.html> at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Johan Meiring Cape PC Services CC Te

Re: SSH with Radius on one Server: no password match by authentication over sshd --- password match over NTRadPING

therefore the shared secret is incorrect. Either fix pam to talk to the 110.110.110 address or fix Freeradius to have the correct shared secret under the 127.0.0.1 client Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe

Re: Help needed with user authentication

how does Freeradius do that? Where is that page so i can edit it with my logo or whatever? Or do i need more software to have that login page? Please assist, am desperate here to get this working.. thanks in advance! Try coova.org/CoovaChilli -- Johan Meiring Cape PC Services CC Tel: (021

Re: Call for 2.1.11

http://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00357.html Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: modules directory

using the "name" Definition: checkval blah { item = ... } Calling the module: blah Hope that helps. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius on lenny doesn't permit mschap auth

On 2011/01/14 03:57 PM, Josip Rodin wrote: Actually it's even simpler. Add lenny-backports to sources.list, update, and just install the new packages. Must say I didn't know that backports also maintained freeradius..... -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Re: Freeradius on lenny doesn't permit mschap auth

e. Extract. run dpkg-buildpackage You have a debian package for 2.1.10 that you can install. Its that simple. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Deleting stale session automatically with unlang

ng-Station-Id}' and AcctStopTime is null}" -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: segfault with rlm_perl

t of production) to show a ram problem, is to compile a kernel. I've seen compilation fail at different stages with faulty RAM. I realiuse the advice might sound ridiculous, but it has worked for me before. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-77

Re: Voip database

the following on your "centile NAS". setProperty com.centile.connectors.aaa.remotepass 1122 ^^ -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradiu

Re: Voip database

On 2010/12/21 10:01 AM, miha- wrote: Thank you @Johan Meiring for that. It is not my intend to spam the group and asking same question again and again. Belive me that I have done everything that you said (I changed secret on the NAS and ond the radius and I restarted both,...). So please help

Re: Voip database

and Freeradius. The Phones password (in access-request) is encrypted using the shared secret. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Do get in some other file?

here: http://www.catb.org/~esr/faqs/smart-questions.html Especially here: http://www.catb.org/~esr/faqs/smart-questions.html#homework Maybe someone should tell us who the teacher is so we can ask him to add some mailing list etiquette to his course? Cheers, -- Johan Meiring Cape PC Services

Re: Freeradius COA trigger

On 2010/12/13 05:23 AM, Andrew Paternoster wrote: Hi Johan Do you mind sharing a copy of your COA triggers? In Perl (rlm_perl) - Where I make my decision to disconnect. --- if ($balance <= 0) { $RAD_REPLY{'Tmp-String-0'} = 'DISCONNECT'; };

Re: Plz advice on a good captive portal for FreeRadius

On 2010/12/11 06:07 AM, Jayakrishnan wrote: Please advice me how to create a Captive portal with in the FreeRadius AAA server. Is it possible to use NoCatSplash and use FreeRadius Authentication and Authorization? Use CoovaChilli (Previously called chillispot) -- Johan Meiring Cape PC

Re: dynamically selecting, which attribute to evaluate

I said: You can't really do two levels of expansion like that, sorry. Using rlm_perl, you should be able to get the functionality you want. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: configure radius to write detailed log to multiple files

ist "mydetail1" and "mydetail2" i.e. When configuring more than one of the same "module type", name them and refer to them by name. Hope that makes sense. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS 2.1.10 regression in logging behaviour

On 2010/11/27 01:32 PM, Alan DeKok wrote: Another fix would be to add a "radmin" command to re-open just the log files. Squid does something similar. "squid -l logrotate" reopens the log files. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 8

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

se do not have problems with disconnections. What you are saying My red car wont drive, but my green car does. What is wrong with my red car? We have NO IDEA. You will have to troubleshoot yourself and come up with better info. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883

Re: configure output summary

! Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and Cisco VPN IPSEC profiles authentication

On 2010/11/04 06:40 PM, Jevos, Peter wrote: I'm sorry , It's outlook : ) As they say Friends don't let friends use outlook! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Doubt - Freeradius + Ldap

On 2010/11/04 02:37 PM, eduardo moreira wrote: sorry radtest -d /etc/freeradius username 123456 10.12.60.19 1812 password any That should work. The "any" is probably unnecesary. What does freeradius -X now say? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax:

Re: Doubt - Freeradius + Ldap

On 2010/11/04 02:16 PM, eduardo moreira wrote: raddtest -d /etc/freeradius username password ip-server port-server secret but no works. Copy and paste your command. Do not retype it. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe

Re: Doubt - Freeradius + Ldap

command: radtest username 123456 10.12.60.19 1812 0 password This maps to: user=username password=123456 radius-server=10.12.60.19 nas-port-number=1812 secret=0 ppphint=password -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe

Re: FAQ and Wiki down?

On 2010/10/29 04:43 PM, Mark Holmes wrote: Works for me also IE sometimes doesn't work if the website does not start with www. You then need to explicitly specify http:// Try adding http:// in front of wiki.freeradius.org -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax:

Freeradius COA trigger

to somehow "trigger" a coa that is not caused by an "update coa {}" block, but by some external trigger. Is this possible in any way? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with Alcatel 4604 and Cisco ACS

this attribute on Alcatel is send via Aruba-Essid-Name (attribute 5 in dictionary.aruba). Is there a way to change this behavior or a remap of this attribute for Alcatel? Where is Freeradius involved? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subs

Re: Radius+Ldap:Allow the same host in multiple vlans

u looked at rlm_perl? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius not recording - The maximum number of threads (300) are active, cannot spawn new thread to handle request

book has also been suggested. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Last call for 2.1.10

On 2010/09/22 03:15 PM, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Would be nice to remove "+git" from debian/changelog -- J

Originate COA home_server

neccesary if you want to actually fail-over/round-robin, etc I'm sure I can leave the config as is, as the home_server_pool is never actually referenced. Am I completely confused? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/s

Re: AW: convert mac adresses to lower case

from the switch. I cannot return the mac always upper case as it would not work with the switches which send the mac lower case. I hope this makes sense. Search this list. The question was asked about 2 months ago. It was answered. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Re: Last call for 2.1.10

Lenny now. Not tested it though. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Last call for 2.1.10

tory `/usr/src/freeradius-2.1.10-git/freeradius-server/src/modules/rlm_eap' make[6]: *** [rlm_eap] Error 2 Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Of accounting data and security

ius (my nas, coova, supports radsec). Any comments on ipsec vs radsec? Thanks, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: suffix configuration

correct direction. Was hoping you had read all the files in /etc/radiusd (or /etc/freeradius) already. Look at modules/realm This is how you "split" off domain\user or u...@domain. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/u

Re: suffix configuration

On 2010/08/05 08:17 PM, Sallee, Stephen (Jake) wrote: Does anyone have any input on this? It is kind of a problem for me and I could really use some help : ) realms -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http

Re: Freeradius 2.1.9 stop working

On 2010/08/05 11:04 AM, Alan Buxey wrote: 2.1.10 isnt out yet. but when it is, then your package maintainers should ensure a new RPM is available. This page might tell you how to build an RPM from source. http://wiki.freeradius.org/Red_Hat_FAQ Use git as the "source". -- Joh

freeradius-users@lists.freeradius.org

On 2010/08/04 01:35 PM, Student University wrote: so can please guide me of how i can setup the freeradius 2 with MYSQL to be 100% ready for such production That's easy. All you need to do is read the documentation. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax:

Re: Tag and Untag a port in several VLAN

On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote: Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Just convert 0x320007 to decimal?? -- Johan Meiring Cape PC Services CC Tel:

Re: Documentation question

ontain a lot of information about how the server works, config files, examples, etc. I find the best documentation to also be the doc/ folder as well as the example config files. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubs

Re: freeradius and ADSL-Agent-Circuit-Id

Auth-Type := Accept } } else { reject } } } -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and ADSL-Agent-Circuit-Id

{ Auth-Type = Accept } else { Auth-Type = Reject } } -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dyndns ff 1.1.7

#x27;%{raw:NAS-Identifier}'}" FreeRADIUS-Client-Shortname = "%{Packet-Src-IP-Address}" FreeRADIUS-Client-NAS-Type = "other" FreeRADIUS-Client-Virtual-Server = "amobia_hotspot" } } } Tables above are my own, so modify the queries. Che

Re: FR virtual server question and EAP configuration

(Called-Station-Id = "SSID1") { pap chap } if (Called-Station-Id = "SSID2") { pap mschap } It is enough? I have looking for any example for this scenario but whithout any success. Dont do this. Do the above. -- Johan Meiring Cape PC Services CC Tel: (021) 883-

Re: rlm_perl version?

daemon --start --quiet --pidfile $PIDFILE --exec $PROGRAM || ret=$?" Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Version 2.1.9 has been released

. Dont know if it is supposed to be fixed. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: authentification

/faqs/smart-questions.html#homework -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: COA default configuration...Need help to test radclient

adius-server/blob/master/raddb/sites-available/coa -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Pending release of 2.1.9

On 2010/05/14 11:08 AM, Johan Meiring wrote: Its dynamic clients. Alan, I just saw you were cc-ed on the mail sent to this list. Not intentional. I know you hate it. I always use "reply-to-all" as a habit. It then replied to you as well. Apologies.... -- Johan Meiri

Re: Pending release of 2.1.9

On 2010/05/14 10:35 AM, Alan DeKok wrote: Johan Meiring wrote: The "dynamic clients' code runs modules before the packet is decoded... but that's only because it doesn't *receive* the packet. So any "raw" access to the packet will return nothing. What are

Re: Pending release of 2.1.9

On 2010/05/14 07:46 AM, Alan DeKok wrote: Johan Meiring wrote: There is a log of warnings though. Small subset says this. - dpkg-shlibdeps: warning: symbol radlog used by debian/freeradius/usr/lib/freeradius/rlm_checkval-2.1.9.so found in

Re: Pending release of 2.1.9

On 2010/05/13 07:16 PM, Josip Rodin wrote: Simply install *both* packages, like the dependencies tell you to... OOPS... Idiot mode. I didn't look properly. The one without "-common" *does* exist. Apologies for time wasting...... -- Johan Meiring Cape PC Services CC Tel:

Re: Pending release of 2.1.9

"-common" one. When trying to install freeradius-mysql afterwards, it complained about not finding dependency "freeradius" (without -common). There is something "wrong" with the package names. Also, the version in debian/changelog still contains "git".

Re: Is this Install Guide Complete?

The problem is now IMHO an 'invalid guide' to install a later version is out there. I realize that you might your server soon, but others (that may not wipe their server soon), may try this. The backports route is still better. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Using Nas IP Adress as client "key"

ad idea? How difficult would such a change in Freeradius be? (I've not read the source code yet, just throwing an idea out there). Opinions? PS: I realise that tunneling the radius traffic is a different solution to the same problem, but in our case not always easy to implement. (The

  1   2   3   >